Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3230392e302f32342d3234203d3e20323632363536.roa
File:                     3133382e3132312e3230392e302f32342d3234203d3e20323632363536.roa (raw, json)
Hash identifier:          D45+hF9sS071KgvhNPmFrEdpKOJVRDLvXCvWUBXiK2Q=
Subject key identifier:   EE:DF:29:D3:E7:F5:99:08:71:EE:A9:80:2E:99:CE:64:35:A8:90:3E
Certificate issuer:       /CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
Certificate serial:       62746976176F96219901262AC562F704E1B68244
Authority key identifier: FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3230392e302f32342d3234203d3e20323632363536.roa
Signing time:             Thu 11 Apr 2024 23:08:45 +0000
ROA not before:           Thu 11 Apr 2024 23:03:45 +0000
ROA not after:            Thu 10 Apr 2025 23:08:45 +0000
asID:                     262656
IP address blocks:        138.121.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:74:69:76:17:6f:96:21:99:01:26:2a:c5:62:f7:04:e1:b6:82:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
        Validity
            Not Before: Apr 11 23:03:45 2024 GMT
            Not After : Apr 10 23:08:45 2025 GMT
        Subject: CN=EEDF29D3E7F5990871EEA9802E99CE6435A8903E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:7c:52:20:94:82:95:c4:a9:d6:b0:98:e9:
                    30:ce:d3:3c:a7:4c:44:2b:85:7a:5c:f5:b5:5f:4c:
                    9d:a6:00:a1:9e:0c:55:af:7e:4f:c2:a5:63:42:61:
                    45:5c:00:72:e7:3e:7b:a2:ca:2e:7b:d2:12:bc:a0:
                    73:20:11:05:1e:d3:02:9b:a0:b8:0a:0c:67:50:91:
                    90:18:e5:b5:40:f0:10:ef:d8:53:47:0f:57:06:c0:
                    8c:c7:42:73:8b:80:e8:a0:51:93:ba:c4:f8:10:f0:
                    c3:bb:15:3c:a0:07:c0:c9:e7:e3:3a:22:0b:ee:33:
                    47:69:d9:b1:6c:21:ec:31:1e:44:c1:74:20:32:4c:
                    21:66:08:4d:3f:1e:97:45:f7:0b:66:d3:76:bd:c9:
                    78:14:ee:cb:08:53:42:0f:eb:62:ee:f0:03:52:37:
                    78:39:c8:f5:54:d4:ea:86:4d:4c:6f:d1:fe:b7:76:
                    cd:75:9d:d0:89:6d:85:e9:13:69:0c:90:ed:6b:7d:
                    f8:a2:8d:8f:f7:41:1a:00:45:f1:22:72:26:5d:d1:
                    ad:c2:9d:1c:33:a3:c1:55:8b:d2:11:9c:f3:b2:ff:
                    fc:25:a9:5a:0b:67:45:c9:ff:4e:56:ee:90:81:0f:
                    9c:45:27:ee:e6:9e:eb:81:c3:83:e5:90:29:98:b5:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DF:29:D3:E7:F5:99:08:71:EE:A9:80:2E:99:CE:64:35:A8:90:3E
            X509v3 Authority Key Identifier:
                keyid:FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/FB455FBF472DF7F1EB64F99677568E7414A120AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3230392e302f32342d3234203d3e20323632363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:bc:b1:c3:8e:60:ef:4a:ac:9e:d0:54:f9:b6:e0:21:4b:96:
         17:a5:6b:d0:0d:e1:84:cf:98:eb:42:26:ad:72:91:bb:b3:20:
         85:69:47:50:df:ad:df:99:7a:25:1d:cd:dc:a4:a4:15:65:58:
         f7:10:b2:66:8d:44:1a:24:ea:d2:1a:5d:ba:08:58:db:dd:71:
         af:50:15:92:09:fd:c8:7c:0e:4f:7e:d2:5c:09:c7:87:48:dc:
         63:7c:52:e1:e9:bd:10:d5:f6:b5:ba:c2:90:b0:68:b6:d8:b6:
         66:47:98:7a:c8:9f:50:16:84:31:6f:d5:e7:1e:7c:5e:61:59:
         6b:2b:fd:46:8b:a9:2e:93:c1:f7:32:db:35:9d:8f:dc:52:56:
         25:e2:6e:94:1f:fc:62:b8:76:80:6b:47:3d:e1:25:e9:71:2e:
         26:cd:0a:c1:a1:18:13:e6:cb:14:bb:e6:71:d2:aa:f8:cf:54:
         00:8a:8d:45:58:15:8a:07:cd:e9:42:0d:79:fd:8e:21:b7:fe:
         68:ea:9a:da:c7:bc:b2:f5:28:14:f4:3a:1d:9b:59:b2:13:24:
         d5:b8:c9:10:37:b2:43:1f:8a:5c:00:ab:e5:43:95:6d:f5:7b:
         d4:cb:16:ae:e0:06:3a:ae:69:f6:f7:b7:05:0c:33:b3:e6:11:
         e4:f8:f1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org